mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-02-07 15:03:34 +00:00
c89bc56f6a
You can now say the following in your redbean Lua code:
status,headers,payload = Fetch("https://foo.example")
The following Lua APIs have been introduced:
- Fetch(str) → str,{str:str},str
- GetHttpReason(int) → str
- GetHttpReason(int) → str
- ProgramSslFetchVerify(bool)
- ProgramSslClientVerify(bool)
The following flags have been introduced:
- `-j` enables client SSL verification
- `-k` disables Fetch() SSL verification
- `-t INT` may now be passed a negative value for keepalive
Lua exceptions now invoke Cosmopolitan's garbage collector when
unwinding the stack. So it's now safe to use _gc() w/ Lua 𝔱𝔥𝔯𝔬𝔴
See #97
69 lines
3.4 KiB
C
69 lines
3.4 KiB
C
/*-*- mode:c;indent-tabs-mode:nil;c-basic-offset:2;tab-width:8;coding:utf-8 -*-│
|
|
│vi: set net ft=c ts=2 sts=2 sw=2 fenc=utf-8 :vi│
|
|
╞══════════════════════════════════════════════════════════════════════════════╡
|
|
│ Copyright 2021 Justine Alexandra Roberts Tunney │
|
|
│ │
|
|
│ Permission to use, copy, modify, and/or distribute this software for │
|
|
│ any purpose with or without fee is hereby granted, provided that the │
|
|
│ above copyright notice and this permission notice appear in all copies. │
|
|
│ │
|
|
│ THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL │
|
|
│ WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED │
|
|
│ WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE │
|
|
│ AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL │
|
|
│ DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR │
|
|
│ PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER │
|
|
│ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR │
|
|
│ PERFORMANCE OF THIS SOFTWARE. │
|
|
╚─────────────────────────────────────────────────────────────────────────────*/
|
|
#include "libc/calls/calls.h"
|
|
#include "libc/calls/struct/dirent.h"
|
|
#include "libc/errno.h"
|
|
#include "libc/log/check.h"
|
|
#include "libc/runtime/runtime.h"
|
|
#include "libc/str/str.h"
|
|
#include "libc/sysv/consts/dt.h"
|
|
#include "libc/sysv/consts/o.h"
|
|
#include "libc/x/x.h"
|
|
#include "net/https/https.h"
|
|
#include "third_party/mbedtls/x509_crt.h"
|
|
|
|
STATIC_YOINK("zip_uri_support");
|
|
STATIC_YOINK("usr/share/ssl/root/amazon.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/certum.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/comodo.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/digicert.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/dst.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/geotrust.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/globalsign.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/godaddy.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/google.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/isrg.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/quovadis.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/redbean.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/starfield.pem");
|
|
STATIC_YOINK("usr/share/ssl/root/verisign.pem");
|
|
|
|
mbedtls_x509_crt *GetSslRoots(void) {
|
|
int fd;
|
|
DIR *d;
|
|
uint8_t *p;
|
|
size_t n, m;
|
|
struct dirent *e;
|
|
mbedtls_x509_crt *c;
|
|
char path[PATH_MAX + 1];
|
|
c = calloc(1, sizeof(*c));
|
|
m = stpcpy(path, "zip:usr/share/ssl/root/") - path;
|
|
if ((d = opendir(path))) {
|
|
while ((e = readdir(d))) {
|
|
if (e->d_type != DT_REG) continue;
|
|
if (m + (n = strlen(e->d_name)) > PATH_MAX) continue;
|
|
memcpy(path + m, e->d_name, n + 1);
|
|
CHECK((p = xslurp(path, &n)));
|
|
CHECK_GE(mbedtls_x509_crt_parse(c, p, n + 1), 0, "%s", path);
|
|
free(p);
|
|
}
|
|
closedir(d);
|
|
}
|
|
return c;
|
|
}
|